Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2c85e838-5116-3067-ab0c-252d9ef4f460.roa
File:                     2c85e838-5116-3067-ab0c-252d9ef4f460.roa (raw, json)
Hash identifier:          kz6uONcPNIk26gIASCS1IP33Qg4VgMvnwZMyogKflGQ=
Subject key identifier:   71:AD:36:0C:1A:FF:3A:89:89:DB:BD:C6:72:DC:DE:8E:CA:03:C5:39
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584434CDCA0255F3D0701A931880
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2c85e838-5116-3067-ab0c-252d9ef4f460.roa
Signing time:             Tue 12 Dec 2023 12:00:00 +0000
ROA not before:           Tue 12 Dec 2023 12:00:00 +0000
ROA not after:            Wed 05 Feb 2025 05:00:00 +0000
asID:                     20115
IP address blocks:        173.40.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:34:cd:ca:02:55:f3:d0:70:1a:93:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 12 12:00:00 2023 GMT
            Not After : Feb  5 05:00:00 2025 GMT
        Subject: CN=ab780a81-2277-4f64-a54b-e06c832d546b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ef:04:58:f9:8f:2c:8f:88:2a:a4:0a:48:cb:
                    b9:2e:0a:5b:91:49:cd:df:98:e0:07:45:e9:93:fa:
                    52:27:7b:75:01:cc:57:90:14:bf:3c:ca:74:4b:e9:
                    73:36:29:a0:4d:bc:4a:38:09:68:f0:f4:d6:b2:23:
                    08:e0:ff:c9:1b:26:a3:c4:49:98:15:da:64:14:39:
                    98:c2:ad:fc:e2:27:85:a1:fb:cb:9f:52:87:5c:d8:
                    e2:ec:d4:c5:85:b4:08:37:36:0a:35:4e:6d:17:05:
                    57:d3:e5:3a:38:a9:65:1e:30:d4:a4:72:a1:26:11:
                    24:c3:33:e4:7e:fa:91:de:ff:32:dc:13:84:e7:b4:
                    a6:8c:d2:5a:ca:ac:7f:f5:00:8f:74:c2:eb:1f:71:
                    75:f6:ea:29:51:38:d9:84:b9:02:19:ce:28:66:b2:
                    57:80:13:9f:ee:e0:cb:c8:40:07:d4:e9:72:36:7e:
                    87:15:2b:f2:52:ab:69:b3:88:5c:66:82:d9:b0:9f:
                    53:a2:63:bd:61:d5:cc:7a:e5:81:32:34:1e:f9:fd:
                    bb:99:5f:29:6e:63:78:de:10:39:d0:3d:80:b8:7c:
                    62:b0:ef:4c:76:11:30:56:01:89:e7:f2:ff:2e:83:
                    be:cd:64:1f:de:d9:d1:86:f0:a8:d2:f6:09:1d:92:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AD:36:0C:1A:FF:3A:89:89:DB:BD:C6:72:DC:DE:8E:CA:03:C5:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2c85e838-5116-3067-ab0c-252d9ef4f460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.40.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:8f:c2:fc:70:c2:78:e3:70:85:81:07:59:59:45:a3:8e:1e:
         54:0a:1e:10:e4:58:af:a5:5c:79:04:cd:62:43:f4:78:62:17:
         12:4d:0f:a7:68:66:e2:0e:33:fd:a7:e8:69:a8:7d:5b:20:ae:
         70:6a:3b:0d:7b:dc:0c:f3:f1:95:ec:15:91:2c:8f:3a:20:33:
         a6:65:3f:21:c0:d1:08:e5:cb:44:cc:29:d3:98:f7:c2:b0:4f:
         73:1f:f3:2b:ab:2d:46:4f:8d:a3:f6:7e:26:8d:a3:74:12:e8:
         68:f8:0f:86:b4:9f:5f:a1:25:d0:e2:87:d8:09:0c:10:11:55:
         36:e5:9d:80:d6:99:c6:0f:b5:5d:63:74:e5:47:b2:5d:19:3a:
         c3:8d:c7:9e:09:6f:56:5c:bd:a9:c2:76:78:42:84:b3:89:21:
         bb:d5:a1:42:60:f8:44:f7:a0:a8:6b:3e:cb:d2:1a:08:bf:fd:
         a8:da:d4:d6:3e:20:a8:e4:c5:81:05:e2:0d:4f:a2:a0:42:77:
         92:38:9f:ab:3a:69:1a:f9:57:14:e0:3d:5e:49:68:20:fc:6c:
         1c:73:47:87:ea:6f:9b:12:53:02:a0:04:f3:b4:6f:af:8a:63:
         83:53:52:bf:4a:12:b5:3c:49:cb:bb:b4:b6:67:c0:69:91:6b:
         29:89:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:58 2024 by rpki-client on console-ams.rpki-client.org